CVE-2022-2723: SourceCodester Employee Management System eprocess.php sql injection
Published Aug 9, 2022
·Updated
A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205836.
Affected Software
1 affected component
Employee Management System Project Employee Management System
Event History
Aug 9, 2022
CVE Published
via MITRE·07:10 AM
Data Sourced
via MITRE·07:10 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2723?
CVE-2022-2723 has been classified as critical.
2
What type of vulnerability is CVE-2022-2723?
CVE-2022-2723 is an SQL injection vulnerability.
3
How do I fix CVE-2022-2723?
To fix CVE-2022-2723, ensure proper parameter validation and use prepared statements in SQL queries.
4
Which file is affected by CVE-2022-2723?
CVE-2022-2723 affects the file /process/eprocess.php.
5
What allows the exploitation of CVE-2022-2723?
The exploitation of CVE-2022-2723 is allowed through manipulation of the mailuid or pwd arguments.